fleet-control

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads external GitHub repository metadata, workflow runs, and configuration files via gh api for multiple managed instances, allowing outsider-authored repository content (such as issue titles, workflow names, or cron-state content) to be ingested as free text.